Add user authentication

[markhobson]

There are many operations where we need to know the current user and would like to know additional information about users. For example, creating a story should default to the currently logged in user, and user notifications requires user email addresses.

We need to add a user authentication system, either external or internal as best suited.