added support for typeable URL in consent form (closes #29)

Removed password from the old consent URL (giving consent does not require password).
Also shortened the URL for the typeable version. This will be backward-compatible with the old clients (both URLs work). This will close #29.
@ben-jones, can you please review this?
If this is the old format, we may still want to validate the password