post signup('/api/signup/') {
	password = getParam('password')
	username = getParam('username')
	email = getParam('email')
	uuid = generateUUID()
	object =
		password: password
		username: username
		email: email
		token: uuid
	database.pendingUsers.insert(object)
	mailer.sendEmail(email,'Please click on this link to register www.website.com/api/createUser/' + uuid)
}

get createUser('/api/createUser/:token') {
	token = getParam('token')
	# lookup db for token
	results = database.find('token':token)
	if results.length == 0
		res.send('pending member doesn't exist!')
	else
		pendingMember = results[0]
		passwordHash = BCrypt(password)
		object =
			username:pendingMember.username
			passwordhash:passwordHash
			email:email
		database.users.insert(object)
		res.send('user created, proceed to login)
}