Add user passwords

 - passwords are hashed with bcrypt
 - record algorithm version along with password to
   allow future changes
Merge pull request #31 from gilt/login

Add user passwords to enable login directly to apidoc