ApAp Stack: New User Signup

[chadfurman]

• Passport.js integration for local password auth
• page where user can register for new account
• email verification process
  - After registering, user is shown "thank you, check email"
  - any attempt to login with the account is shown the same message
  - clicking the link in the email will allow the user to login to the site
  - clicking the link will invalidate all verification links for the account
  - clicking the link will not log the user in automatically
  - after clicking the link, the user can login
  - links can only be used
  - all active links are invalidated once one link is used
  - links expire in an hour
  - clicking the link verifies the token
  - if the verification token is valid, the user sees "verified" and is redirected to the login page
  - if the token is not valid, the user is shown an "invalid token" page and redirected to the login page
  - if the token is not provided, this is treated like an invalid token.