User authentication

Add ability for users to log in and log out. Resolves #10 
Instead of double-negative, you could do `current_user.present?` which is a bit clearer.  Up to you.