Add an AuthenticationController

- Logout and login work.
Check if the user has rollback rights before logging them in