Add User creation and login. everyone's password is "password" for now, and all errors go to 404