User authentication

Add ability for users to log in and log out. Resolves #10 
`/users/new` still a thing?  If not, remove it from the resources above