User authentication

Add ability for users to log in and log out. Resolves #10 
I suggested it because it keeps the `digest` logic within the `User` class.  Right now, there's some knowledge in the controller that the value stored in the database is a digest of the value stored in the cookie.  Gives me bad feels, but YMMV