Enable file reloading
Allow creation of user

Also changes /user/:id scope to /currentuser which looks up the logged-
in user, else halts with 403 forbidden.

Enables cookies and sets the session token when creating a user.