User authentication

Add ability for users to log in and log out. Resolves #10 
Move this method under the `private` block unless it can be accessed via a route