Super basic authentication, move out some consts

Very basic POC for authentication/session management. Also moved the web
file paths to variables at the top of the file so I don't make myself
crazy later.