got rid of an unused argument in QuerySegments; selecting recoveryMasters round-robin from a random permutation of live servers
merged changes in viewservice/server.go