switching back to no urls in the permissions

Revert "so hisakonog can debug the app reverting for now"

This reverts commit deb67bd3e872ae54765181d9362a2860fbaabc35.
found bug in localhost detection, important for running on touchdb on android and for testing cors proxy for #838
for #838 tested the CORS-proxy project (https://github.com/gr2m/CORS-Proxy)

 customized for a new CorpusWebService (https://github.com/OpenSourceFieldlinguistics/CorpusWebService) which will proxy a local couchdb for us for #838, it appears to work for couchapps, next step is to test it with nginx https wrapper on the testing server to be able to contact it from the chrome app
moved back up user function into the app so that the views aren't required to execute it fixes #842
Some more cases where corpusdev wasint being called because lingsync was more general
small changes for testing #838