User authentication

Refactored user authentication code. Biggest change was creating a new `RememberToken` class so that the logic around the remember tokens wasn't spread out among `User` and `Session`. Also the first time I wrote tests for custom controller methods, so feedback on those would definitely be appreciated. Thanks to @yaychris for the refactor help and bettering my Vim-fu.
Oh cool, that's good to know. Turns out I did manage to get it working and forgot to take out the comments.