Allow command-line args to deploy.py, update README.
Get controller ID programmatically for the sake of CSRF origin checks.

Also, shortcut to call remote API (accidentally amalgamated; too
harmless to bother separating.)