added sorcery authentication, simple views, controllers

Karim did it all, I can't be held accountable.