Add security object to handle log in / out
user object just manages it's own data
Route logout, simpler Header interface
Assign data to the controller parent so that the Header can get it
User authentication

Use the Security module to do authentication
parse the JSON coming from the authentication because it's not real AJAX
right now
Add a populator to the authentication filter method so that the non-page
parts of the page (like Header) can get user data
bugfix
Switch content based on auth status
Trigger the user auth population (with no other actions) on error pages