don't send the client IDs, hashed passwords, &c
fancy comments
sort results before sending to the client
update to fully use GOOG books API, no solution to AJAX bugs yet