Added que token authentication on the backend

just do a POST /auth with {"user": "username", "pass": "password"} to login.
GET /auth/whoami to get user info, and DELETE /auth to logout
Frontend logging in and out, but it doesn't really do anything yet