fix(auth): users with unverified email shouldn't log in
feat(auth/completeProfile): respond to json
feat(userModel): setPassword without saving user model
Merge pull request #48 from chopachom/master

fix(auth): users with unverified email shouldn't log in + feat(auth/completeProfile): respond to json