Authentication

 - [x] log in initially with username and password
 - [x] return access token in payload when successfully authenticated
 - [x] authenticate user from token in `ApplicationController`