first round trip through oauth2 app authentication for existing user
add user endpoints for create, reset password, and change password.
add OAuth impersonate endpoint
authorize/decision working for app
add test for authorize endpoint
add tests for decision
issueClaimCode to non-users in publickey path
remove obsolete migrations
add test to cover round tripping principal tags
clean up old school coding style
remove capabilities
remove old secret based authentication mechanism
remove secret based authentication code
Merge branch 'master' of http://github.com/nitrogenjs/service