Wrote a jwt internals package to simplify generating and validating tokens
Made a new endpoint that can be used for confirming actions from jwt tokens. The token contains the action information and the handler executes it.
Added user confirmation emails by sending an email with a token that activates an account. The token expires in 15 minutes to prevent abuse
I also did a little refactoring