API, pt IV: CRUDdy Units

New API calls:
- GET /units/<name>
- POST /units
- DELETE /units

fleetctl is now fully functional if signing & verification is not used. There is still more work to do, but the API can be considered "useful" with this PR.
Yeah, that's great - I just want to avoid totally unexplained and unrecorded 500s.