moved to http

this isn't done, but needs review. builds heavily on #24. diffs look bad, would recommend just checking out 

notes:

* tests inc.
* currently curl'able like (ignore auth if none): `curl -X PUT -d '{"key": "x", "timeout": 10000}' -H "Authorization: OAuth abcdefg" localhost:45625/lock` README should cover basics.
* do we want real OAuth? token generator? or just get a cert for https? This eliminates the authentication step and doesn't have persistent connections, just expects plaintext token in header for now on each request.
* client is broken (for now). re: curl