Allow extra http headers to be specified on DDP.connect.

Only works on server-to-server DDP (websockets clients) right now, which is a
little weird. I can't figure out if sockjs allows us to specify extra headers.
Minor webapp cleanup
Replace ssh tunnel deploy with cookie-based auth.