README notes

'Since we use Spring's 'username' column name in the DB (and not 'email'
as planned), it is important to
know that we expect the username to be the email of the user. we count
on it by sending email to this
address.'
Currently, the flows jar supports all flows (except change password):
forgot password, create account. a mail is sent to the inbox of the user
(we assume that the 'username' is the email!), with a link with
encrypted data. Endpoints in the flows jar handle these events
respectively.