Non facebook auth

This allows customers and vendors to register and log in without requiring a Facebook account. We still have to do password recovery, but I wanted to open this to encourage you all to break this as much as you possibly can before it goes in.

This a pretty substantial change, so it'd be awesome to get everyone's approval before this goes into master (followed by deployment)