Change urls

Closes #245 

Application number is now back in the form flow `/apply/application_number`

User session controller handles returning(`/application/returning`) and reminding(`/application/reminder`) users

your password game is strong