User can save pw digest and lookup by credentials
Adds session create/destroy
Enable file reloading
Allow creation of user

Also changes /user/:id scope to /currentuser which looks up the logged-
in user, else halts with 403 forbidden.

Enables cookies and sets the session token when creating a user.
Better status codes for login/user creation