Merge WebService into Server, Fix Auth Bug

- Merged webservice.js into server.js, so that the two can share
 a port.
- Remove cardHolder_id from RFID cards in the database, determine
 ownership using the same model as the web UI
- Fix authentication bug. In my testing:
   - Inactive card: auth=false
   - Active card with zone access: auth=true
   - Active card without zone access: auth=false
   - Non-existent card: auth=false
   - Non-existent device: auth=false
- Updated the Pi script to use the Zenit url, will test with it
 shortly.