Add authentication and user accounts

This will be an optional feature that we'll probably allow users to semi-permanently hide (or more accurately, demote to advanced settings). The purpose is not for tracking but for guarding expensive API endpoints behind authentication. We don't want to put e.g. a Mapbox token in the APK for traffic-aware routing, but we do want to offer traffic-aware routing, and this is how we reconcile those goals.