Auth system implemented, sessions are now token based (uses Redis). Moved code about to make more sense.