Skeletons and sanity.

* Simplified `auth.User` a bit
* Added skeletons for the following
  * Settings pages
  * Category listings
* Improved redirect handling in `user.login()`