user.verify doesn't use app settings

[johnsoftek]

App settings such as host and port are not picked up correctly in user.verify.

The bug is:

 var app = this.app

should be:

 var app = userModel.app

Also, host and port are being referenced from app settings. So should protocol e.g. https