watchlist added to REST controller
Things remaining:
1. Wiring UI to REST urls
2. AJAX support