add specs for tracking todo order
bump up test and ajax timeouts so we gracefully handle pauses while e.g. waking up a slumbering heroku dyno
make it more obvious that you can point the tests to a different server target