Basic user access

This adds very basic user access control. 
I realize that it's preferable to hide the login and register buttons if they are disabled but I thought that this was better than having no user access control at all.