Authentication

[mjneff2]

At some point we must add some sort authentication so users can only delete/modify their own Spots and Reviews. Will edit this issue further once we have a better idea of what we want for this.

[daviskeene]

Personally, I don't think that users should have ownership of the study spots that they create. Reviews are more of a gray area for me, as people would have the option to give us their name.

We should have this conversation soon. Is our auth system going to be a JWT token, where requests are only valid if sent using the client? Should we have people optionally log in with Google in order to leave a review? I'm not sure.