User authentication

Add ability for users to log in and log out. Resolves #10 
This is repeated a couple of times. Consider adding a `before_action` for this and adding it in front of the `create` action as well.  Should probably also require a user to be signed in for the `destroy` action.