consolidate to use only one WebWorker
add reqID, to avoid double callbacks. still need to push into worker2
more worker consolidation, should be just one PageWorker and one WebWorker
handle decrypt errors correctly (bad MAC, unknown version)