Merge WebService into Server, Fix Auth Bug

- Merged webservice.js into server.js, so that the two can share
  a port.
- Remove cardHolder_id from RFID cards in the database, determine
  ownership using the same model as the web UI
- Fix authentication bug. In my testing:
    - Inactive card: auth=false
    - Active card with zone access: auth=true
    - Active card without zone access: auth=false
    - Non-existent card: auth=false
    - Non-existent device: auth=false
- Updated the Pi script to use the Zenit url, will test with it
  shortly.
Merge pull request #34 from caitp/api

Merge WebService into Server, Fix Auth Bug