auth: change login api to current_user api

GET - check current user
PUT - login with username/password
DELETE - logout