Using standard http for now. Added /login (GET,POST) and /logout routes.
Added UserSession (loading from JSON)