Add the beginnings of user auth

- User can only be logged out right now, but UI toggles on logged-in/logged-out state
- Pull over rules.clj from https://github.com/tailrecursion/hoplon-demos/ -- this will eventually get replaced with checks to the database