fix manage page, now we explicitly call /wsapi/csrf so that the page itself can be cached. issue #74

move /csrf to /wsapi/csrf.  add /wsapi path to cookies, as all other requests should have aggressive cache headers.  Only create a csrf token when the client asks for it.  issue #173

add logging to CSRF token generation, and rather than throwing an exception when a mismatch is detected, log an error and return a bad request to the client (seems like a better fit than 'not authorized'). issue #173

remove dead code.  we moved from cookie-sessions to connect-cookie-sessions.  we shouldn't have references to the former, and the latter does not throw exceptions when invalid cookies are encountered, so we don't need exception handling there.

interface winston logging better, use the Console transport when running in the dev harness rather than manually logging to console (yay for colorized output)

all tests now run against all persistence layers, warnings are output when (i.e.) mysql isn't set up and we can't test against it, but the developer should clearly understand what's going on.  closes #171

top level test.sh file now tests to see if we can connect to the database before running tests for that environment.  issue #171

rename 'log_path' configuration variable to 'var_path', as now it will be the path to all files created at runtime.  issue #172

logging setup is moved into app.js for the browserid server (now common between test and prod envs).  remove it from the run.js harness

introduce a new logging abstraction and log all process output to two files: one for metrics, and one for server logs.  closes #169

find instances of console.log() and send them to the logger instead, when running under dev harness also route to console.  issue #169

rather than imposing restrictions on structure of logged objects we should make all required fields proper parameters that are obvious upon inspection of the signature of the log function. issue #168

test fix - always stop the database.  This prevents tests from hanging when you manually target mysql for all tests