use postgres to do password verification
(work in progress) lock down frontend db permissions

I'm moving everything the frontend does to a function so that we can prevent the frontend user from having any direct access to tables in the database
fix user creation
fix fake money
fix withdrawal
can cancel order
fix 2fa setup
reorder some stuff
PR fixes
use `select` instead of `select * from`
Merge pull request #29 from txbits/viktor/sqlfunctions

Viktor/sqlfunctions