added backpack middleware that sets req.backpack.
factored out getAcceptedAssertions() in POST /issue route.
renamed lib/backpack.js to lib/index.js.
moved backpack model out of lib/issue.js, to lib/backpack.js.