add authorizeMember middleware

this middleware enforces members only looking at their own data
TODO: add staff override to this authorization
return id with session creation
added logout method
postman file update-now with postman Jetpacks

upgrade to postman that can run scripts.  this allows you to login a user and then all the other endpoints automatically have the token included