Popped stash from master. (Was working on wrong branch) Now the client
is treating login/logout correctly (as tested). Also fixed a little bug
with the HTTP response (used to be a 404) at the delete-user REST
endpoint.
Updated the old tests (a bit), and fixed a service layer bug.
Demonstrated that aspects work, and created tests for bad input.
Finally, figured out how to let advice run on the server!
Removed dirty comments.