add /signup and /login pages!

also: make signup happen via POST w/ JSON, not query params.

resolves #52 and #54.