Implementing POST /login, I think

Closes #12 
Is the hashing happening client side?