Normalise the users email address

This is done so that we don't run into capitalisation issues.
Change the timeout, and reissue_time

We want to make sure that the session never expires, since this also
causes our CSRF token to expire, which causes issues...
Return the new CSRF token in the cookie

This way any new requests can use the new CSRF token to do the request.
Add a responseError interceptor for $httpProvider

This way when the response is an error, we get a chance to interrogate
it. In this case if the error is the CSRF token issue we can re-run the
same request with the updated CSRF token.