Working login.
fully working auth, untested auth_required decorator.
When a user is removed, his position is too.