make sure user schema is cloned first, so we don't inherit anything
from previous registrations
woops - deep clone
move from underscore to lodash so don't need extra clone module
add created/loggedin timestamps
don't require clone
version bump
Add note about using express app session middleware
add forgot-password link (doesn't work yet)
password reset successfully, bypassing store.accessControl by using
mongoskin directly (not ideal, revisit)
send email with new password
database update fix, use process.env.NODE_DB_URI (fix that)
db_uri is accessible to model, don't need process.env
version bump
don't console.log user
don't disable login button,they'll get an error anyway
Add params to passport.authenticate
Merge pull request #15 from switz/scope

Allow user to pass params to passport.authenticate
fix withId
return hashed_pass for now, mass sets wipe othewise
allow read/write from server, so you can write REST functions