Add an annotation model.

* Re-add the `ssl` config option, the session cookie depends on it.
* Add the raw reduce filter.
* Clean up the hits graph code.
* Hook up annotations from front to back end.