- logout action
- access token added back to user
- validate user on model (keeps it dry)
- gson exclusion strategy
- base64 on utils now
- a new message string