solved reset header problems
Merge remote-tracking branch 'upstream/master'
Fixed password  middleware relying on req.session
merging upstream
Merge pull request #12 from elliottwilliams/ID-42

ID-42 (3): Fixed password middleware relying on req.session
Fix ID-46, change password hash alog from SHA to SSHA
Fix ID-45 and improved groups saving performance
Merge pull request #13 from Plypy/fixing

ID-45, ID-46: Fixing password algorithm and validation for migration
Bump to v2.0.0