add API endpoint for FxA login

see http://greyface.org/fxa.html for some notes on the intended usage here
for some reason I thought we got rid of `amo_user` with the profile changes.