API, pt IV: CRUDdy Units

New API calls:
- GET /units/<name>
- POST /units
- DELETE /units

fleetctl is now fully functional if signing & verification is not used. There is still more work to do, but the API can be considered "useful" with this PR.
Yes, this is a more general problem to address - bare 500 errors are terribly unhelpful for clients.