Validate credentials at beginning of new session

[efstajas]

When starting a new session and credentials are stored client-side, we should call an endpoint on the API (maybe called /user) that validates the credentials and responds either 200 or 401 depending on whether they are still valid. If the response is 401, we should clear client-side auth data to ensure the UI renders in the logged-out state.