- Fiddled with a bunch of stuff
- Formatted file

- pulled in apache's Base64 codec
- refactored most crypto functions that could throw exceptions to throw GeneralSecurityException instead of whichever specific exception

- Commented out methods for encrypting/decrypting, we probably won't have time to implement them
- Fixed a few unsafe operations (particularly the use of new String(byte[]) which does not behave as expected)
- I'm not kidding about the bcrypt operation using 1024 iterations.  Yes it's computationally expensive, that's the whole point
- changed visibility of most protected functions to public
- removed validateSecretCode because it was basically just a glorified == operator

- Added a main method for testing

- Instantiating SecureRandom is expensive, so instantiate once and reuse the instance
- Change secret code generation function to take an argument (the sequence number, use -1 to calculate from the current time)

- various references to database removed, other code will be responsible for handling database lookups

- TODO: threaded nature of tomcat may present issues if we reuse a single Auth instance. determine if this impacts us