GS-1-TRN

Get things running. Mostly focusing on basic authentication, web frontend and apps model. @twinge 
Since you have 3 methods that all just call `authenticate`, it'd be nice to move `authenticate` to a `before_action`