Allow configurable API host URL
Allow configurable API host URL

Everything was hardcoded to api.singly.com, which is no good if you're working
with a Singly/hallway instance somewhere else (eg, developemnt). This allows you
to pass a `hostURL` that then becomes the base for authorization, token and
profile fetching.

Singly/passport-singly