add Ecto model for user
db-based authentication (still plaintext passwords)
update README file