don't check in our config.js file

Private data in there
Adding underscorejs
clean up a few things

* make config sep file that is not tracked
* attempt to load plugapi from NODE_PATH
* don't require mysql twice and only when we are in usedb
* add config.js.sample

now you can put config.js and just put your room and auth and get going
Fix up some issues

use the API on plugRoom {getUser,addUser,removeUser} to manipulate
the userlist.

This should prevent null pointers that blow up the bot
whoops
Merge pull request #1 from d3mcfadden/master

Structure/stability updates