JJH:  added an index.html page for an attempt at Backbone.js.  Need more
time.
JJH:  I can get all cities and go through the security filter and
everything works as I would like...  EXCEPT, I can't bind a User Object,
or anything else for that matter, to the method signature.  WTF?  It
works on POST...
JJH:  Injecting the SecurityContext does the trick.  I'm a bit unclear
as to the "how" part, but for now, it works as I want it to.