Associate users and articles; require login to post

Resolves #12.
Didn't totally think this one through.  I see you want to be over-writing the value in `session[:redirect_url]` on each request.  This is fine.