Initial draft of the user registration and login

Not final version, still returning and setting cookie vars based on
insecure content