RPC route callback yucky
Cleaned up server-side injection.
Lots of changes, a big old flow commit.

JugglingDB now uses REST and not a socket, for interoperability, as well as simplifying access control
Rudimentary access control, hardcoded wide open for the moment. Unified client and server achitecture - roundtrips will be avoided if necessary, but hard checks will always occur server-side.
'me' service for getting the current user on client side.
Angular server-side rendering event added for now, to speed up rendering and guarantee synchronization
socket emissions are queued before initialization, then emitted upon initialization
small API rename for notification service