Refactor routes into separate files
Basic login spec
Use bcrypt to hash passwords in database
POST /login should return a JWT token
Store tokens so that they can be used to lookup the current user

We will also expire tokens after a period of inactivity
Merge pull request #3 from stevehook/auth

Implement simple token-based authentication