WIP to have the ban manager and an authentication server communicate.
Lowercase the UUID parameter. This way all post parameters should be in lowercase.
Use the provided user UUID when updating the UUID instead of the one for the authenticating user.
Change over to use a new more standardized way to denote endpoints.
Every endpoint is defined as an action parameter in the URL query. e.g. action=update_user.
WIP, still need to update the UI front-end to use these changes.
Fix cookie time check being incorrect.

Modify the authentication tests so they generate a different HMAC instead of just sending in a bad HMAC.
Change the password hash database column has to a varbinary so we don't have to worry about padding.
Update the UI so use the new endpoints.
Make sure the controller references the POST data instead of GET.
Modify the settings test to do a basic test of the accessor key.