Unfortunately combine 2 things at once. Sorry, but it had to be done.
* Harden the client API endpoints similarly to the server endpoints.
* Fix a bug where map sync was stripping out names and sizes. This was needed because once the client had hardened endpoints, mapsyncs would get dropped.
Sorry, I didn't notice the bug until I had significant changes touching the map sync code already. Stashing would have caused me to have merge hell after, leaving the bug in place would have required comitting untested code, so I basically had to do both at once.