[WIP] Authentication

Do not merge, 'tis a work in progress. :)
Is this user object going to be passed around and persist for a long time?  Should we be worrying about having this password stick around in string form?