adds an auth property to usermodel
removes the loginevent->getcurrentuser chain and supplies a little more info on successful login
as before, getcurrentuser is fired on app startup if token exists but now a success should mark authenticated as true
creates nested states for user.detail and user.new
createuser no longer calls getuser