Code cleanup for recover/reset/confirm user accounts
* Moved user account related actions to Auth
* Stop calling user resource for checkResetToken, recoverAccount,
  and resetPassword. Using Auth passthrough instead.
* renamed isValidRestToken -> checkResetToken