Jdu/user auth

I would suggest the `sucker_punch` gem. https://github.com/brandonhilkert/sucker_punch