data/sessions: add db.DeleteSession method
data/models/user: add user.TryPassword method, to attempt authentication
data/users: add db.SelectUserByUsername, split out single User fetch into db.selectSingleUser helper