feat: bearer token support

Switch from cookies to bearer tokens
This PR takes auth token from the couchdb cookie and exposes it as a bearer
token at the HAPI level:
* When couchdb sets a cookie, it is stripped, and the authToken is added to
    the JSON body.
* When a request comes in, the 'Bearer ...' token is read from the Authorization
    header, and converted to a cookie for couchdb.

This happens at the hapi level.
The solution is based on https://github.com/spumko/hapi/issues/1637
and https://github.com/spumko/hapi/blob/master/docs/Reference.md

BREAKING CHANGE:

Hoodie is not using cookies for authentication anymore and relies
on hoodie.js@^1.0.0
fix: prevent hapi, internal, implementation error

see https://github.com/hoodiehq/hoodie-server/pull/288#issuecomment-56018667
chore: added todo comment

https://github.com/hoodiehq/hoodie-server/issues/322