add API endpoint for FxA login

see http://greyface.org/fxa.html for some notes on the intended usage here
this isn't fireplace-specific right? Maybe commonplace_token or login_token