add content module
add Location header to POST responses
ignore _content folder
add security module
check for array when replacing _id with id
add /api/accounts
hash passwords
add ensureAuthenticated() test helper