second attempt to add the VCF exporter

The VCF exporter finally generates output that can be used in R.
The permitted projects should be limited based on the user, and on whether that user is explicitly allowing multiple projects.  By default, if a query spans multiple projects it should fail, to prevent unintentional violations of an IRB.