bump to relengapi-0.1.2
add environ auth
bump to 0.1.3
Reorganize user authenticationo

This supports two types of authentication: browserid and external.

External authentication now only requires authentication of
`/userauth/login`.

Note that, for the moment, this breaks oAuth2.