Registration and login
Discarded cookie sessions in favor of using http bearer authorization. Works better cross-origin
Always get current user if Authorization header is sent
List and create bookings
Accept, reject and list bookings per user
Send email to confirm email address
Require verified email on login
Verify email if token is correct when fetching session
Tell user what kind of login error occured
Send email notification when a user receives a booking request
Log path on error
Request logging
List only hosts on /users
Profile image uploading. But resizing not working...