API, pt IV: CRUDdy Units

New API calls:
- GET /units/<name>
- POST /units
- DELETE /units

fleetctl is now fully functional if signing & verification is not used. There is still more work to do, but the API can be considered "useful" with this PR.
I don't want to log user-caused errors. We should return actual error entities instead.