apiv2 - much cleaned up, by re-using fucntions in api.coffee. misc.batchTxn takes an optional `user` param, in case we don't want to use private paths "_user" (which we don't want to do on the server!)