for the formWrap, always show the favicon and signIn, adding a contents to the appropriate area so that this acts more like the wait and error screens.  This helps simplify page_controller and its writing of the templates.  Updating the tests for page_controller.

Fixing the problem of iOS only showing two email addresses.

close #417

Starting our first unit tests for the page controller - whether the templates write to the correct DOM elements.

issue #432

issue #432

allow code in the test environment to dynamically change system configuration to test stuff (like bcrypt work factor update, for instance)

implement dynamic bcrypt work-factor update so we can scale this up or down as we seek the optimal security/performance balance

Beefing up tests for waitFor*.  Checking whether the returned status is 'complete', 'mustAuth', or 'noRegistration'

close #415

WSAPI CHANGES: All server responses are now objects, makes some funky browsers happy and prevents certain attacks.  closes #217 closes #325

  * /wsapi/have_email now returns { email_known: <boolean> }
  * /wsapi/stage_user now returns { success: <boolean> }
  * /wsapi/user_creation_status now returns { status: <string> }
  * /wsapi/complete_user_creation now returns { status: <boolean> }
  * /wsapi/stage_email now returns { success: <boolean> }
  * /wsapi/email_addition_status now returns { success: <boolean> }
  * /wsapi/complete_email_addition now returns { success: <boolean> }
  * /wsapi/authenticate_user now returns { success: <boolean> }
  * /wsapi/remove_email now returns { success: <boolean> }
  * /wsapi/account_cancel now returns { success: <boolean> }
  * /wsapi/logout now returns { success: <boolean> }

Finally, introduced middleware to ensure that resp.json() is not called with anything other than an object.

update to bcrypt v. 0.4.0 which includes .get_rounds and lets us perform on-the-fly work factor update.  issue #204

close #380

close #409

close #410