emailauth branch merged

so this was intended to add the local strategy for signing in via username/password, however i will transition from everyauth to better maintained [passport](https://github.com/jaredhanson/passport) - also because it was suggested by jared personally ;)

i still merge what's there because emailauth contains numerous other improvements