User authentication

Add ability for users to log in and log out. Resolves #10 
Reading over Hartl's Rails tutorial, he suggested doing this as protection against stolen cookies, i.e. if a cookie were stolen but the same remember token was still in the database, it could then be used maliciously. I *highly* doubt that this would be relevant to this particular app, but, assuming he's correct, it seemed like a decent practice.