Add login

This changeset adds user-authentication awareness by way of the Devise gem.

See https://www.pivotaltracker.com/n/projects/1172184/stories/80648080

See https://github.com/dpla/heidrun/pull/3.  This mounts KriKri inside of Heiðrún and shows off its simple signup, login, and account-management pages.

I'm assuming that certain things, like token-based authentication and fleshing out the ACLs, are best implemented in other stories.  Right now, the basic request for logins is being satisfied.  The application controller's before_filter requires all KriKri requests to be authenticated.

The AclController is deliberately left incomplete, since another story will be created to deal with access control, probably after we've thought about our needs some more.

I was inspired to use the initializer by this post: http://pivotallabs.com/leave-your-migrations-in-your-rails-engines/

There is a specific argument there about there being "a weird upward dependency where the engine is actually dependent on the wrapper app" if the migration is upstream.