Login

Local auth for v1. Designed so we can swap to SSO later.