Cookie sent with successful login

fixes #39
add auth endpoint

fixes #40
Using app description instead of app name

fixes #42
Merge pull request #42 from agrc/password-reset

Lastest round of bugs