User authentication

Add ability for users to log in and log out. Resolves #10 
Should be able to do `unless user && user.authenticate(password)`