in production (dev/beta/prod) use a more conventional logging format that includes timestamps.  closes #234

implement throttling on outbound emails: don't send emails to the same address more than once per minute - issue #430

fix double substitution in local environment introduced in commit f5be9659 - closes #486

Signed-off-by: Lloyd Hilaiel <lloyd@hilaiel.com>

Signed-off-by: Lloyd Hilaiel <lloyd@hilaiel.com>

Signed-off-by: Lloyd Hilaiel <lloyd@hilaiel.com>

allow code in the test environment to dynamically change system configuration to test stuff (like bcrypt work factor update, for instance)

ensure users must authenticate every week (issue #309).  Also, move all magic numbers out of implementation and into the configuration abstraction.

rename 'log_path' configuration variable to 'var_path', as now it will be the path to all files created at runtime.  issue #172

find instances of console.log() and send them to the logger instead, when running under dev harness also route to console.  issue #169

For tests, instrument `email.js` so that one may register an interceptor
function which will be invoked rather than attempting to send email.

closes #88.

rework deployment configuration (using less of the express mechanism) so that configuration options are available at all levels

rework deployment configuration (using less of the express mechanism) so that configuration options are available at all levels