Authentication

Sessions are now a thing throughout the app.
You ain't gonna need it (YAGNI)