Permissions
Manage jQuery and Q with bower

I think Q's checked in q.min.js is actually still broken, but having
dependencies managed is nice.
Update version of convict
Seal message ids
Better control of offset

Not specifying means don't anchor to a message id. Also control inclusive vs.
exclusive.
Serialize saving messages in the db

We need to impose a consistent global order on messages.
Use res.json

Minor convenience function in Express. Can switch it over to jsonp later too if
we care. Although every browser we'd care to support can do CORS now...
This appears to be the prevailing style
Rename subscriber.js to server.js

It's really the whole thing.
Give MessageQueue a more generic name
Move the subscriber into a separate file

This piece talks to zephyr. It must be a singleton and, in theory, could be
separated from the HTTP frontend.
Move the connection manager out to a separate file

Still doesn't implement tails, but at least we deliver messages only to the
right user now. (Not that we have multiple users yet...)
Move more of subscriber startup to subscriber.js

The frontend should not be in charge of loading up initial subs.
Implement tails

This involved moving the msgid sealing to be at a less convenient layer. But
that was necessary since sailed message ids can't be compared. It's really
annoying.