added exclude list to password lib.
added frontend validation to create user form and deal with some form states. WIP
added require_valid_user updates on Session tab in settings.
fixed other fields that I broke when I removed submit button. WIP
fixed resetting radios on Sessions tab.

wrote a function because it was annoying.
save is still WIP.
refactored settings sessions handling a bit.

incorporated require_valid_user couchdb config update into settings.
removed extra submit buttons from session tab, and made password field
visible on create.
added session_timeout and session_persist to sessions panel. continued
refactor

removed instances of humane.error() since flashing error messages for a
second is not humane.

continued some refactor on sessions update process.

added validateSesssionsForm function mostly just a stub.
fixed bug; only bind listeners once.

moved the listeners outside of showSessions();
added 302 redirect to login show if already signed in.
fixed logout bug when require_valid_user == true in couchdb config

logout simply didn't work when require_valid_user was true. i think this
is somewhat by design because /_session does not require auth and
returns 200 no matter what, so it's impossible to delete the session? see
http://wiki.apache.org/couchdb/Session_API  so I repeated a hack which
appears to work in Futon, pass in _:_ for user/pass when doing DELETE
/_session.

Needs more testing with the other login methods, not sure how they
will be affected.
added some validation and generate password button to add admin modal.
Merge pull request #4 from mandric/master

 fixes on create user and sessions settings -- WIP