GETful endpoint for user watchlist

Since this has a schema change, it will break your local site unless you drop your "users" collection.