Changed much of the API

carts now have uuids associated with them, there's new endpoints
/data/login and /data/print, and POSTing a cart now means sending only
an array of associated document ids.

These changes aren't implemented in either the frontend nor fakeserv
yet.