User authentication

Add ability for users to log in and log out. Resolves #10 
I left that original comment before I suggested nullifying the remember token instead of regenerating one on sign-out.