#1004 User authentication

* Added authentication endpoints (`POST /login`, `GET /logout`)
* Added session handling
* Added reset password feature
* You can use `"email": ["sendmail"],` in your `secrets.json` file for localhost testing. Check your spam folder for the reset password email.
* Still need to add tests (need to figure out a way of testing sessions)