Added mailer plugin and development.conf for development. Mailer uses mock mailer in development to avoid sending emails in dev. Moved conf files to better places. More organized. Added partial support for password confirmation by email on registration. This is obviously configurable to enable. Confirmation API must be added + frontend.
Move userSession call to global configuration state, configuration shares state and current confiuration so that frontend developers can customize based on what config is enabled or not. Configuration is loaded in sync before app is loaded.
Fix some global issues, cleanup some code. Further add APIs for new functionality.
Refactored activation code out of AuthorisedUser. Also secure re-sending activation emails, now a solid key is required for this. Logins with correct user details can get a badRequest with information about accessKeys available to re-send emails. This means that it's impossible to find out others id and spam random confirmation emails.
Admin should obviously be enabled.