A bit of code cleanup all-around (removed unused variables/imports here and there).
auth.py:  Fixed a bug ('user' is undefined) related to user logout with API authentication.
utils.py:  short_hash() is now guaranteed to return a string and not bytes.
gateone.py:  Changed from using tornado.version_info to just using tornado.version since older versions of tornado did not have version_info.