security check all requests prior to dispatch
make defaultservice non-abstract, add some misc utils
put test stuff in test tree
more fleshed out identity protocol
code gen