Split the API

[smashwilson]

Part of the API is intended to be consumed by cloudpipe/cloudpipe:

• GET /v1/style
• GET /v1/validate?accountName={account}&apiKey={key}

The rest is intended to be consumed by JavaScript as part of a web UI:

• POST /v1/accounts
• POST /v1/keys
• DELETE /v1/keys?accountName={name}&apiKey={key}

Moreover, the former calls should be made with client certificates that are signed by the internal CA (with a subject matching the Docker link name auth-store), while the latter should be signed by a certificate that's browser-accepted, meaning signed by a real CA (with a subject matching the external DNS name).

So, I'm going to need to listen on two ports and bind different handlers to each server.