Adds response time logging
Improves bookmarklet scalability and robustness

* Exclusively uses cookies for tosser identification
* Pre-minifies the non-dynamic bookmarklet response
* Adds tossing via iframe as a backup
Does not escape bookmarklet code in the HTML
Responds with 401 when no cookie during toss
Adds login to bookmarklet actions
Fixes doctype declaration
Lints views, but not hogan views
Handle a 401 response after toss is sent
Updates package versions and changelog