Custom NSURLProtocol to auth fetching private site content.

We can fetch images from private sites courtesy of a bearer token added to the request header, but images loaded in a `UIWebView`'s content are tricky.  This patch introduces a `NSURLProtocol` subclass to add the header and make the request. 
Refs: https://github.com/wordpress-mobile/WordPress-iOS-Editor/issues/115

### Before
![ios simulator screen shot nov 19 2014 5 19 32 pm](https://cloud.githubusercontent.com/assets/1435271/5116868/779e4874-7013-11e4-8306-03c5f29c9be3.png)

### After
![ios simulator screen shot nov 19 2014 5 33 48 pm](https://cloud.githubusercontent.com/assets/1435271/5116871/7de1dcbe-7013-11e4-9b0b-624560ec7c90.png)

I know I'm being paranoid here but I was wondering if we should be checking that the host is either just "wordpress.com" or ends with ".wordpress.com".

The scenario I fear is pretty unlikely I believe, but still this change would definitely rule out someone trying to figure out your token using domains like:

- wordpress.com.diego.com
- diegowordpress.com