Added ID check functionality when making API calls, wrong mongo ID's now throw a 400 bad request error.

Added password reset functionality. Users can request a password reset, they receive an email with a token based link. By navigating to the link the password for that user can be reset. Tokens are valid for an hour.

Emails now have to be unique.