Miscellaneous cleanups.
Unauthenticated handlers
Rearrange thumbs so it will install properly.

With py_modules, we weren't able to install package_data, so make this
into a genuine Python package.
Thumbs moved, lint the new one.
Fix enough pylint violations to pass the build.
Merge pull request #134 from edx/ned/refactor-packages

Rearrange thumbs so it will install properly.
Change from decorator to handler_url argument.

Rather than decorate the handler as an unauthenticated handler, instead
indicate that when getting the URL to the handler.  This gives us the
ability to provide authentication eventually, and lets the Javascript
handler_url() function also produce these URLs properly.
Make handler_url and resources_url properly abstract
Merge pull request #133 from edx/ned/unauthenticated-handlers

Unauthenticated handlers