Added hand-rolled user/session models and authentication