Initial implementation for system API app

Up for review -- initial implementation of the system API, which exposes management functionality for users and groups, including user authentication/sessions

@chrisndodge @antoviaque @martynjames @dianakhuang @cpennington @singingwolfboy @ormsbee