Merge pull request #114 from dannycoates/hawkKey

Clarify splitting {session,keyFetch}Token into id and reqHMACKey
add high-level login call to client
Merge pull request #135 from mozilla/client_login

add high-level login call to client
began implementing /password/forgot
WIP on forgot password tests
implemented client side of forgot password

added a verification test of the forgot/reset flow