auth v1.1

[XertroV]

auth refresh - improving some stuff before v2

• one time tokens
• email out OTTs connected to some login process initiated via the app
• allow OTTs to be redeemed for a new hashedS
• hashedS db arch
• hashedS expiry
• flux api-v1 update to use hashedS+s for auth
• flux api-v2 update to use hashedS+s for auth
• update all login screens
• update rego page to work with hashedS
• implement session management + auditing + revocation
• totp