Web workers. Fast async decrypt, not on UI thread

Also, somewhat cleaner REST.