Add user creation/edition/authentication, secure controllers for users, return 401 on ajax requests and do appropriate redirects to login page