two small changes:

- bulk add records to temporary list all with one call, rather
  than iterating over each record and making a call for each
- detect a goken in get_list and set the agent up with the session
  to view a non-public list owned by the user

Signed-off-by: William Rockwood <wrockwood@tadl.org>