Refactored email authentication

* Added an EmailAddress class to use instead of passing around a string
* Made an AuthApplication class to get app logic out of the route class
Adding tests for the creature routes, and cleaning up the REST api as I go