Rec tokens

Upon rec request, this will automatically generated a hashed token.
In order to access the rec/edit page that hashed token is needed in the url
The token is sent out in the email to the recommender.


Fixes #56 
Shouldn't this be a validation thing? If no valid email address then sent back to form with flash message?