Separete setup code into it's own module

It grew too hairy to be in app.coffee
Mongo session store
Removed authenticate template and updated routes

Auth form is now in profile-box component.

Routes are /authenticate/login and /authenticate/logout. Only POST is supported.