Improve signin

#2413

- Remove fixture and use actual API
- Store and send down actual logged in user data
- Refactor isLoggedIn to use computed property on application
- After signin, update user data in dependency container
- Add CSRF to all routes and controllers via initializer
- Update authenticated route to check for user.isLoggedIn
- Add notifications for signin error
- Add notifications.showAPIError helper
- Add plumbing for refreshless signup to doSignUp in admin controller

Here's a little licecap of the refreshless signin behavior:

![improved-signin](https://cloud.githubusercontent.com/assets/164497/2979092/523a9976-dbc5-11e3-8c6f-862c2922227f.gif)