Implemented next batch of API changes

This implements the updates described in #96

A few TODOs remain before this should be merged:

- [x] clarify the HKDF context for authToken
- [ ] validate the email string post hex decode - deferred
- [ ] update test vectors in bundle_tests.js