User struct, password utilities
Email-only login form
Authentication via single-use login tokens
Sessions

To do:
- [ ] Log out.
- [ ] Show login status on every page.
- [ ] Use message flashing instead of status page for success/failure.