Basic login and logout.

* routes for login and logout
* store user id in session on login
* validate login form