separate user impl and add as dependency
move server logic back into auth
DRY auth strategies
discerning logic between mean-auth and mean-user
cleanup app