Auth tweaks

[JackBellinger]

• [ ] Make sure to notify on duplicate usernames
• [ ] password requirements: number special cahr, caps, etc
• [ ] captcha
• [x] remove password in request body from logs
• [ ] Try out a different auth library