add API endpoint for FxA login

see http://greyface.org/fxa.html for some notes on the intended usage here
Will this become `/login/` when we remove the waffle? If so, could we add a note?