Feature/api auth

Require API authentication to create fountains. Also adds login UI to be embedded in the mobile client.

This is a backwards incompatible change - **deploying this will break existing clients ability to create fountains**.

https://www.pivotaltracker.com/story/show/67121414
I don't see that we're using this anywhere. Do we need it?