[wip] use new permissions API - untested
fix typo using callback
added API for hoodie.store.METHOD().publish() / .unpublish()

@caolan Note that `$public` gets set to `true` when published and
to `false` when unpublished. The worker has to pick up the
unpublished objects, remove them from the global shared store
and then remove the `$public` property. We can listen to that
in the frontend and tell the user when an object has actually
been removed from the public store.
setup filtered replication on account confirmation
Merge branch 'frontend' into per-user-permissions
fix permissions test when writing to global-share db - createdBy is hoodie id not couch user
added gitignore
fix bi-directional replication and add unpublish tasks
bump major version