Move endpoints to implement spec. Now sending request message, not bare username.

Requires request-parameter branch of crtauth-java