[NEW] Implement HTTP Session Authentication

[ybkuroki]

Purpose

To allow only authorized users to see book datas.

Expected behavior

• Some users can login or logout by using username and password.

How to deal with this issue

Implement the following method.

• Implement session management using echo-session library.
• Implement authentication function.
  • Login Rest API
    • Authenticate using username and password.
    • Check authority of login user.
    • Create session id and set cookie session id.
  • Logout Rest API
    • Remove session and cookie.
  • Validate session id in the each request.
    • Implement using echo's middleware.

References

• echo-session
• echo's middleware specification
• echo's middleware sample