Partial auth rewrite, big improvements in security

Use salted hashes to store passwords, use jwt to send account info,
improve recovery route.