DO NOT MERGE: Initial implementation for system_manager app

Up for review -- initial implementation of the system API, which exposes management functionality for users and groups, including user authentication/sessions

@chrisndodge @antoviaque @martynjames