Remove JWT checks to allow routing (bug 1042781)

This branch removes checks for the JWT so that we assume that if there wasn't a JWT in the request we're not going to need to process one. 

As a result this allows more optimistic routing - we assume if there's no JWT that we don't do the transaction setup and just route based on the known state.

* I've removed the current method from the router as this isn't used.
* We're now called view funcs more directly which allows refreshing of the page without issue. In most case this means you'll end up back at enter-pin dependant on the state.
* Added tests to cover refreshing the page.
Login is probably the bit that would be different just hitting up a url directly.