Move API command param parsing to middleware
Remove JSHint/Istanbul from package.json

JSHint is very rarely used, and Istanbul only on Travis to generate coverage
reports for CodeClimate.

So instead of bundling it with Cylon at all times, it will now be installed
globally by Travis prior to running tests.

The Make tasks for JSHint/Istanbul now also assume both packages are installed
globally, rather than in the local node_modules directory.