Lost Password (#1), TTORP testing

 * add "/lost" URL, use cs_authToken functionality
 * added form in admin for creating auth tokens manually
 * add phpmailer via composer/packagist
 * updated message for the login page (if they're already logged-in)
 * link for "lost password" if they're not logged-in
 * added direct link to member's area for sub-menu, and for blogs
 * removed the "new" image from the TTORP campaigns link