Login

Plumbing
========
* Create Login controller to govern the session around login and logout. 
* Hook up Application controller to check the authentication every time.
* Created Auth Route (will be the parent of all routes that needs Auth to operate)
* Store the token and user info in the session

TODOS
======
* Use more permanent storage then a controller (localStorage, cookie, etc.)
* Send back the token on all requests as part of the header.
* Hook in `logout` call to server.

Depending on https://github.com/CrazyHorseHQ/smart_app/pull/31
Is that synchronous? I think the store calls return a promise that you'd have to deal with later. If it works, it works, just wondering from the top.