Public interface fix

Assigning to @payten.  I forgot to run the tests for the public interface, and Jenkins caught this.

Two bits to this change:

  * One to have all requests share a session ID to the backend.  I thought this was causing my problems... it wasn't, but possibly nice to have anyway.

  * Give the public user access to view records.  What I should have done to start with :)