Add auth.go with basic authentication/session validation utilities
Update users to include authentication related methods
Add /login and /logout route to login and log out users
Update documentation for some small functions