Working in the JSONP decorator now, to support CORS.

That won't affect the "temp" line here, though -- it's just there so that manual tests of the distributed server, before these endpoints are enabled on the central server, won't break: in particular, it will still be possible to download videos on the distributed server without needing to set up a local central server (I agree that setting up a central server should be a prereq for testing any reg/syncing stuff, but don't think that it should be required in order to do basic standalone UX testing of the distributed server).