Add ability to expose app and request locals as private variables

Fixes #57

I went ahead and implemented this as `hbs.provideLocals()`. Let me know if you want a different API and I'll change it. I can also add a full example in the `examples` directory if you'd like.

I wrote a test, but it's being marked as a failure even though there's no visible difference.