Extract validateHash & validatePresent to util
Adds ensureAllowed to loginFailureTracker
Adds wallets_v2 table and fixtures
Delint
Renames login failure tracker to lockout
Use lockout.ensureAllowed in /wallets/show
Adds /v2/login_params/show
make authToken non-unique
Adds POST /v2/wallets/show
Adds totp code support
Adds ip lockout to /v2/wallets/show, fixes test
Use constant time string comparison to check authToken
Adds /v2/wallets/create and happy path test
Adds blank field tests to /v2/wallets/create
Adds bad hash tests
Adds tweetnacl
Adds beginnings of signedJson, with happy path test for read
More work on signedJSON:

- Remove signedJson.write... we dont need to sign json on the server side
- Adds tests/code for bad signatures and unparseable bodies
- Adds stubbed middleware
Adds stubbed tests for signedJson.middleware
Delint wallets_v2_test