first commit. Working: authentication, session handling, login / logout broadcast via socket.io