Refactor routes into separate files
Basic login spec
Use bcrypt to hash passwords in database
POST /login should return a JWT token