remote nearly working

but I think there's a bug in browserify-http; gunna switch
to straight XHR or maybe do as an angular service

Also, API URLs should include userid.