properly set headers if user is modified twice
switch to session-backed authentication

Removes the need for a separate authentication cookie and secret
and ensures authentication cannot out-live sessions and vice versa.
document WeakMemoizedProperty
better date abbreviations

fixes #228
put heatmap in container
put heatmap into container
put pointers into same container
use unminified angular
fix css for everything, whole heatmap can move about freely
undo angular switch from 6a951ae
correct spacing on heatmap
rework auth/reg forms and sheet

- Drop deform from angular app -- this was too confusing and strange
  and makes it harder to pull the front-end application out of the
  repository.
- Make the sheet much more attractive by tying it to the toolbar
  in a clearer way and toggling between "Sign in" and the close 'X'.
- Start to normalize the way errors are handled in form submissions
  on the back-end by offloading basic validation messaging to the
  front-end, removing the need to constantly re-render the forms.

Still to do: flash messages (#233)
prevent flash of un-collapsed elements
whitespace
handle server flash messages in AJAX views
client-side flash message implementation

closes #233
whitespace
add missing password length validator
reset auth forms on app reset

Introduces 'resettable' directive which runs at super high priority
and listens for the '$reset' event on the scope upon which the
element is stored to its pristine condition via a full element
transclude.

closes #159
small flash style tweak