added basic login/logout functionality

- using the AuthComponent::BlowfishPasswordHasher we're just storing the
hash of a password
- you're allowed to add accounts for testing purposes
- currently, you're only allowed to perform the index() actions when
logged out