I've been a dumbass for too long

* `auth.User` was hashing the hashed password when loading saved
   user data! (That's fixed now)
* Worked out a basic template for user profiles (though I don't
  know what the use case for them is yet)
* Added a skeleton for `user.settings`