fix typo using callback
added API for hoodie.store.METHOD().publish() / .unpublish()

@caolan Note that `$public` gets set to `true` when published and
to `false` when unpublished. The worker has to pick up the
unpublished objects, remove them from the global shared store
and then remove the `$public` property. We can listen to that
in the frontend and tell the user when an object has actually
been removed from the public store.
setup filtered replication on account confirmation
Merge branch 'frontend' into per-user-permissions
fix permissions test when writing to global-share db - createdBy is hoodie id not couch user