feat: bearer token support

Switch from cookies to bearer tokens
This PR takes auth token from the couchdb cookie and exposes it as a bearer
token at the HAPI level:
* When couchdb sets a cookie, it is stripped, and the authToken is added to
    the JSON body.
* When a request comes in, the 'Bearer ...' token is read from the Authorization
    header, and converted to a cookie for couchdb.

This happens at the hapi level.
The solution is based on https://github.com/spumko/hapi/issues/1637
and https://github.com/spumko/hapi/blob/master/docs/Reference.md

BREAKING CHANGE:

Hoodie is not using cookies for authentication anymore and relies
on hoodie.js@^1.0.0
fix: prevent hapi, internal, implementation error

see https://github.com/hoodiehq/hoodie-server/pull/288#issuecomment-56018667
chore(npm): hoodie.js@^1.0.0-beta.1
chore(npm): grunt-hoodie-release@2.8.0-beta.1
chore(npm): updated hapi to latest, and replaced nipple with wreck
test: update to latest wreck
test: fix tests
fix(assets): re-rename pocket->admin-dashboard

* * *

This commit was sponsored by The Hoodie Firm.
You can hire The Hoodie Firm:

http://go.hood.ie/thehoodiefirm
fix(test): hapi chomps newlines, we like newlines

* * *

This commit was sponsored by The Hoodie Firm.
You can hire The Hoodie Firm:

http://go.hood.ie/thehoodiefirm

* * *

This commit was sponsored by The Hoodie Firm.
You can hire The Hoodie Firm:

http://go.hood.ie/thehoodiefirm
fix(cors): make all headers lowercase, otherwise hapi will overwrite them

Also adjust tests.

* * *

This commit was sponsored by The Hoodie Firm.
You can hire The Hoodie Firm:

http://go.hood.ie/thehoodiefirm
chore(release): v2.0.0-beta.1
chore(npm): hoodie-admin-dashboard@^2.0.0
chore(release): v2.0.0-beta.2
chore(release): v2.0.0
Merge remote-tracking branch 'upstream/master'
Merge branch 'master' of github.com:wrangr/hoodie-server