Added package.json for Node.js install
Moved physics to clients

This means we will be trusting clients for everything, but it seems to
be unavoidable due to possible performance limitations for Node.js and
hosting solutions.