allow path-based custom domains

Before this you had to have a separate domain if you wanted to
use a different developer key and secret. That was lame because
since everything is over SSL it meants having to pass certs
around.
handle empty paths
add path prefix to html links
add ocad logo