implement authentication

[mehimself]

• JWT@cookie [bearer=minerva]
• register > hash credentials > request > email token
  • validate token > redirect to login
• login > hash credentials > request > JWT + user
  • retain user
• logout > request w/ user > forget user
  • invalidate JWT
• reload > restore session | redirect to home
• reset pw > request > email token
  • validate token > redirect to change pw > hash credentials > request
    • validate > apply > invalidate JWT
    • redirect to login
• change email > request > email token
  • validate token > redirect to change email > hash credentials > request
    • validate > email token
    • validate > apply > invalidate JWT
      • redirect to login
• navigation guards on private routes