Add request approve and deny
Add csrf validation, session creation/destruction
Users now own cats
End of day, start multiple loggin support