totally removes mongoose.
implements _generateSecret.
removes passport & unnecessary controllers and views
adds code comments