end-to-end login

da full flow

![image](https://cloud.githubusercontent.com/assets/339996/3206733/965db570-edcc-11e3-92e9-8f4872af5e1b.png)

There's also going to be session tokens so this path is a little ambiguous