Made editable() client-side only; Untabified stuff

UNTABIFIED!!! PRAISE BATMAN!!!

Made .editable() on FieldInstance & ModelInstance client-side only, so
doing things like Meteor.userId() will work.

Also, changed the implementation of Formation.Validators so that they
are damn-near-impossible to change.  Prevent hackz.