Add the API resource for verifying assertions

There is now a Web API resource to verify login assertions with the
Persona verifier. This resource will not log the user in yet, but will
verify the assertion and return the proper response.