Adding the user api controller.

- Fixed up the user api controller
- Allow log out via this mechanism (deletes session data)
- added a whoami to validate the user who is logged in
- autocomplete - this way the app can also auto complete usernames
- new_seamail - one end point towards getting seamail counts
- Allows the api consumer to just use the session cookie id to validate login instead of having to include a key.
- Allows the api user to show other user's profiles.  Allows admin to show more details by passing in the admin flag.