Implemented next batch of API changes

This implements the updates described in #96

A few TODOs remain before this should be merged:

- [ ] clarify the HKDF context for authToken
- [ ] validate the email string post hex decode
- [ ] update test vectors in bundle_tests.js