added some auth boilerplate code

also did some linting
added user model to the database

including real password hashing
housekeeping
replaced bcrypt with bcryptjs
watch models and routes for changes during development