Account functionality extended, API authentication implemented

- Can now add a second email address to your account and delete one of 
your email addresses
- Reset password now works
- Resetting the password of an account without a password set will set 
one
- Email templates overhauled
- Login tokens limited to close previously devastating ($800 database 
bill) security hole
- Login with REST API now works
- Once logged in, authentication of API calls with token works
- Creatures can now be fetched using the API

app/server/main.js

@@ -1,6 +1,8 @@
 import '/imports/api/simpleSchemaConfig.js';
-import '/imports/server/config/accountsEmailConfig.js';
 import '/imports/server/config/SimpleRestConfig.js';
+import '/imports/server/config/limitLoginTokens.js';
+import '/imports/server/rest/index.js';
+import '/imports/server/config/accountsEmailConfig.js';
 import '/imports/server/config/simpleSchemaDebug.js';
 import '/imports/server/config/SyncedCronConfig.js';
 import '/imports/server/publications/index.js';