use crypto.randomBytes instead of node uuid
argh
remove the anti timing attack stuff for now
remove reset codes method
thumbnail logic
allow wide images
cleanup messages and emails