Don't double load routes on initial page load.

history.replaceState will fire a popState event, so we don't need
to call routeChanged manually. I'm not sure how to test this since
we don't have a history mock to check firing the events.
Allow refreshing /user/{email} urls.
Show a login page if the there's no current user. Fixes #29.