Split out the API to a separate domain
Don't prevent default for touchstart

Doing this means we don't get the click event, which we very much want.
Use hash locations

So I don't have to figure out if I can get history working with nginx
right now.