require password when verifying account
change timeout on verification tokens to be shorter
ensure mobile phones are unique per tenant
refactor verification key stuff to have dedicated column for storage
initial migration
configure localdb (remove sqlcompact)
add initial create migration
change provider names to 30 chars
Merge commit '78cb1e0a934017dade985cafa83f034ed0d3ea8a'
rename changepassword enum to resetpassword
verification storage migration
copyrights
hash verification keys sent in email for better protection
store mobile code hashed for better security
use pbkdf2 for mobile codes given that keyspace is so small
reorg src and samples (sorry)
hint path
more hint paths
refactor how two factor auth token (cookies) in browser are created and validated for better security
rework two factor auth tokens; invalidate if mobile number changes;