use unique names for stormpath api key id and secret in app.js
Add some more stormpath api methods (anything requiring a json request body isn't working yet)
no application id when creating
Send stormpath params as JSON in the body (NOTE: right now we send all the params - even query params - in the body. Definitely a FIXME)