Complete GET /user.

Remove option to authenticate with query parameter.

Add authentication code and function to compare passwords.

Add methods to get users and devices.