Create secure method of authentication

[jamespfluger]

To connect a device with Alexa, right now we're using an unauthenticated API that relies on Alexa speaking a OTP to find a device. This isn't ideal because someone could theoretically spam the API with a payload and block the API.

It'd be better to have an authenticated account system set up, which would require a host of new problems to solve:

We'll need:

• A sign up website, fully compatible with "Sign Up" and "Sign In" and "Forgot Password" - maybe we can do this with a Blazor page? That sounds like a fun project to get into
• Preferably some form of MFA, either via an MFA app, email, or phone. Let's go with the cheapest MFA option
• Someplace secure to store the passwords. This should be done using a service and not implemented on our own. This is the hard part because security needs to be more important than it's been treated.
• Implement authentication into the app - ideally using an easy service
• Implement authentication into the API - ideally using an easy service

This may have to be it's own project and would be considered an epic.