new 2nd factor auth
server: pulled auth logic out into server/auth
Merge branch 'auth' into v2
removed unused module require