Implemented Users, Claims and Sessions. Post a username and password (in query string) to /authentication to receive a session key, then put a sessionkey in the query string of every request to execute that request under that session. GET /authentication to view the current user

Signed-off-by: Martin Evans <martindevans@gmail.com>