Add password hashing to loginHandler

Will create user management page for admins soon as well. This will be fine for the time being though -> https://www.dailycred.com/article/bcrypt-calculator for generating hashes.

Author: gmemstr

.gitignore

@@ -21,4 +21,5 @@ feed\.rss
 
 assets/static/custom\.css
 
-config\.json
+config\.json
+vendor/

Godeps/Godeps.json

@@ -1,4 +1,4 @@
 {
-	"admin": "password1",
-	"gabriel": "password"
+	"admin": "$2a$04$ZAf88Bao4Q768vKfCaKBlOqtPumwKwFhrcpBCdfMWWFX69wyhgTqi",
+	"gabriel": "$2a$04$KrhZ1q6FpOGqs0FVKMYhQ.BTYeVXztnjrM9RbK.0buI1OHfmyNEAy"
 }

assets/config/users.json

@@ -7,6 +7,7 @@ import (
 	"log"
 	"net/http"
 	"strings"
+	"golang.org/x/crypto/bcrypt"
 
 	"github.com/gorilla/mux"
 	"github.com/gmemstr/pogo/admin"
@@ -146,7 +147,7 @@ func loginHandler() common.Handler {
 
 		// Iterate through map until we find matching username
 		for k, v := range u {
-			if k == username && v == password {
+			if k == username && bcrypt.CompareHashAndPassword([]byte(v), []byte(password)) == nil {
 				// Create a cookie here because the credentials are correct
 				c, err := auth.CreateSession(&common.User{
 					Username: k,