Allow flask.json to encode WSME types
don't expect documentation of types used in test modules
fix docs typos
Use AngularJS

This also shifts the external JS libraries around, and holds jQuery
locally to avoid the possibility of code injection via DNS hijacking.

Angular templates don't mix with Jinja2 templates -- Angular templates
are static files.  This avoids any conflict over interpolation markers
({{ .. }}).

The auth and tokenauth blueprints use Angular, while the
authentication button stays with simple jQuery, leaving it outside any
Anglar app on the page.
Use subrequests to get initial_data

This properly adheres to permissions
rewrite issueToken to use $http
handle permission errors in subrequests appropriately