User authentication

Add ability for users to log in and log out. Resolves #10 
I'm wondering if these should be private methods.  The `current_user=` method could be replaced with `attr_writer :current_user`