require authentication on complete_* wsapis to reduce risk now that password is provided before email verification.  issue #290 and a pre-requisite for issue #1000

  * all database functions return an err as the first param which is non-null for failure.
  * all wsapis handle database errors and return service unavailable to client.
  * stalled-mysql-test implements unit tests to verify proper failure behavior of all wsapis.
  * configuration parameter added to define max allowed time per query

refactor httputils to remove needless logic and better leverage express.  easier to read and maintain.  also remove unused and unnec functions

implement throttling on outbound emails: don't send emails to the same address more than once per minute - issue #430

implement polling in dialog and related wsapi in server, this is when waiting for email verification, subsequent to sign up