Add signin, signout and ws tokens

* Issue #84: added /signin/ route. UI should now point to /signin/
* Issue #83: added /signout/. This removes the user cookie
* Issue #81: added simple socket token to validate user origin.
* fixed config-sample to reflect fxa normalization
* some formatting
* added npm step to install.bash