Require a serverToken  on the private collection

Also, upgrade to newer versions of hakken and user-api-client
Bad console.log!
Merge branch 'cheddar/require-server-token' into kjq/cleanup1 so that we're ready for when
that branch merges to master.
Add a couple of comments, remove an unused function.
Make it jshint-clean
Make it jshint-clean correctly.