Login now stores email and API token in SessionStorage.
Smartened up the API creation (made an after_create filter on the user model, rather than in the controller)
Yoyos can now be edited
Yoyos can now only be edited by logged-in users.