User authentication

Add ability for users to log in and log out. Resolves #10 
These will probably move to instance methods when you refactor token generation on `User`, but it's more standard to use `self.new_remember_token` when creating class methods.