feature/CAS

Fixes #35 
So it's not really an email. To do this right I think you need to ditch the User AR object and have something that's not hooked to a database table.