Safer event namespaces
Don't return password or salt
RESTful, reading flow, fix salt

Fixes #4