Added padding for flash messages stage.
Need auth for dev.
Added HTTPS to email links.
Changed callbacks to promises, mostly.
Got rid of verbose console.log