switch from SHA1 to SHA256
Added UserViewModel so requests don't send salts and hashes up to the client
Added user view model so that the password and salt don't go to the client
merging from origin
Merge branch 'hardenSecurity' of github.com:justinrassier/meanBrew into hardenSecurity