Unit tests for Session API. new-sql-date -> new-sql-timestamp

Tighter Authentication

Card API Tests

```
POST /api/card
GET /api/card/:id
DELETE /api/card/:id
GET /api/card/:id/favorite
POST /api/card/:id/favorite
DELETE /api/card/:id/favorite
```

merging frontend changes from django app.  this also includes a couple tweaks like replacing $cookies with ipCookie to make sure we stay compatible with our new auth system.

we need to remove the session cookie right when we get a 401 response from the api and know the session is no longer valid.

upgrade authentication check middleware to validate that session user `is_active = true` and session age is less than max-session-age

flushing out little things here and there on Org and OrgPerm endpoints.

check for valid emails

when user is updating their email address, check it's a valid email format and that it's not already taken by another account.

unit test for GET /api/meta/table/:id/fields

unit test for POST /api/meta/dataset

Password Reset