POST for create, PUT for update
add profiling
make test work, sort of
disallow slugs with spaces, and check POST for existing challenge
prohibit setting session keys other than the ones in me_fields
removing me endpoint, fixes #166
Merge pull request #296 from mvexel/master

API changes