Refs #2, #3, #4 — Implements first endpoint behavior. Hawk and BrowserId still missing.