Account functionality extended, API authentication implemented

- Can now add a second email address to your account and delete one of 
your email addresses
- Reset password now works
- Resetting the password of an account without a password set will set 
one
- Email templates overhauled
- Login tokens limited to close previously devastating ($800 database 
bill) security hole
- Login with REST API now works
- Once logged in, authentication of API calls with token works
- Creatures can now be fetched using the API

app/.meteor/packages

@@ -45,3 +45,5 @@ akryum:vue-router2
 percolate:migrations
 meteortesting:mocha
 ostrio:files
+simple:rest-bearer-token-parser
+simple:rest-json-error-handler

app/.meteor/versions

@@ -108,6 +108,8 @@ sha@1.0.9
 shell-server@0.5.0
 simple:json-routes@2.3.1
 simple:rest@1.2.1
+simple:rest-bearer-token-parser@1.1.1
+simple:rest-json-error-handler@1.1.1
 simple:rest-method-mixin@1.1.0
 socket-stream-client@0.4.0
 spacebars-compiler@1.3.0