added email config to make testing email easier - be careful on production. Fixed sub-bug in db.js, callback not returned.

a re-thinking of forgotten password flow and partial implementation (for the purposes of initial launch, forgotton password flow is a re-verification of email, and it will require re-verification of other emails as well)

return the string encoded JWT to the client, don't wrap it in a magic object as it might guide developers into trusting something that is untrustworthy.  closes #33

fix content-type of host-meta, which ultimately repairs the local testing setup (substitution is not performed on stuff that isn't text)

upon clicking 'this is not me', clear all text entry fields (catches the case where a user logs in and clicks said link all in the same session), issue #27

reduce the dialog size (and hence its perceived *weight*), and increase the size of some important phrases

fix test harness.  you really must jump through hoops to create a proper substition output filter in connnect.