Removed submodules and code for unused dependencies

We don't currently use
- github.com/dchest/passwordhash
- code.google.com/p/go.exp
_bulk_get response type should be multipart/mixed, not multipart/related

Same goes for single-doc GET with ?open_revs
Fixes #272