Reworked error handler

The count parameter will no longer be coerced to a default value, and
error handling won't trigger "Can't set headers after
they are sent" errors.
Auth token can only be provided via header
Don't expose message id or user id from /archive
Purge unnecessary ngCookie dependency