Merge pull request #28 from wkimeria/master

Fix inadvertent revert of Auth-Token header to auth-Token header
Location of static assets in account service has changed
Rather than return a redirect on Auth Failure for AJAX requests, return
a 401 with a Json response body indicating session expiry