Add login

This changeset adds user-authentication awareness by way of the Devise gem.

See https://www.pivotaltracker.com/n/projects/1172184/stories/80648080

See https://github.com/dpla/heidrun/pull/3.  This mounts KriKri inside of Heiðrún and shows off its simple signup, login, and account-management pages.

I'm assuming that certain things, like token-based authentication and fleshing out the ACLs, are best implemented in other stories.  Right now, the basic request for logins is being satisfied.  The application controller's before_filter requires all KriKri requests to be authenticated.

The AclController is deliberately left incomplete, since another story will be created to deal with access control, probably after we've thought about our needs some more.

I agree with @no-reply's suggestion in Slack that we look at using something like [Cancan](https://github.com/CanCanCommunity/cancancan) for the permissions modeling.