remove required from autogenerated fields, fix expireAt type, add missing callback invocation
fix username regex to allow caps, use bcrypt.compare to determine password equality
allow authToken to appear in header, fix bug when clearing authToken from req params
allow all requests to /user/login
add sails dependency on coffee-script