User authentication

Add ability for users to log in and log out. Resolves #10 
What about nullifying the remember token on user then?  Would that be a better option?