Major changes to user auth system. Everything but user create now requires a remember_token.