Nearly all tweaks finished to make claim handler deal with both external IDs
and work IDs, depending on how it's called from the client-side Javascript.
Fixed missing scope and wrong API endpoint. Needed to ask for write-permission for
both external id and works, and different POST URL for each type of POST. bah
Final set of changes to get 1st iteration of work-claiming. Fixes #6