Login / implicit
Session
Move auth around
Add gorilla/sessions and gorilla/securecookie