Clarify _canonical_uri handling

Basically: tiddler_url should always return the url at which
you can manipulate the tiddler and never the _canonical_uri.

The only time the _canonical_uri should come into play is when
you request it directly, non-json.