Improved "passability" of errors to client:

1. Use `message` field instead of `vcapMessage` (restify keys on
        `message`)
2. Include `statusCode` in all `ClientError`s
Allow client to be passed token instead of user credentials.