Implement /login and /logout endpoints

When a user is successfully authenticated a session gets created with
their information using hapi-auth-cookie. When the user logs out the
session gets cleared.