move authentication code into separate file
updates app
add account page for now
add user whitelist through env var
Merge pull request #7 from okize/whitelist_users

Whitelist users