Primitive email- and session-based authentication system working