git ignore binstubs
api for sessions fixed

* now we return the user id on login
* allow a destroy request for logging out
* added test for api sessions controller
Changes to valid format for usernames.
Merge branch 'master' into feature/limit_usernames
change free cert postfix to be a prefix (this is required for how openvpn does common name matching)
use binstubs to make sure we use the right rails version
Have specific error messages for usernames with incorrect formats.

Signed-off-by: jessib <jessib@leap.se>
Merge pull request #34 from leapcode/feature/limit_usernames

Feature/limit usernames to specific formats, and give specific error messages
When attempting to login, the error messages should not leak information about whether a username is valid.

This also means the error message is more appropriate if somebody tries to login with somebody else's username and their password.
Merge pull request #35 from azul/feature/update-install-instructions

use binstubs to make sure we use the right rails version
Merge pull request #32 from azul/feature/api-version-1-fixes

Feature: API version 1 fixes
make api test script work with bitmask and print log
Update tests and documentation to reflect changed error messages with incorrect username or password on login attempt.
minor: fixed logout link
Merge branch 'master' into feature/limit_user_leak

Conflicts:
	users/lib/warden/strategies/secure_remote_password.rb
Merge pull request #36 from leapcode/feature/limit_user_leak

When attempting to login, the error messages should not leak information...
certs - changed the logic of free/paid certs to be limited/unlimited.
no auto update - migrate the couch before
restrict couch access to admin
make sure couchrest actually finds our models in the engines