change some default connection/timeout settings
rename "browserchannel-session-id" to the much shorter "client-id"
remove the core.async channel for sending client->server messages
add support for automatically including anti-forgery tokens in POST reqs
version 0.0.3