login/logout flow

Looks like you got the cookie stuff worked out, what was the trick?

I added the login/logout roundtrip with the `/logout` route and a button on the logged-in-home.

next up - we can wire up a user document in mongo, so when you login we actually check your credentials against something.