Added authentication and authorization factories.
Added group_finder callback for the authentication policy.
Added initial resource tree for session API.
Added password verifier to employee model.
Added session management API which allows for basic logging in, out and checking current privileges.
Removed session table as this is now managed by cookies instead.
Merge pull request #1 from edelooff/session-api

Sessions API