release 0.16

* tunneling option (--tunnel on all apps)
  * supports both ssh -L and ssh -R style tunneling
    * server-managed tunnels: client started with Application#remote
    * client-managed tunnels: any client with --tunnel
  * implementation factored out to easy-serve