More default RPC limits, for user stuff
Cleanups
All hooks are now functions, pkgman.invoke takes args to pass to hooks, and returns a has of path -> result
Q -> Promise, with a few more skilled usage patterns
Made a boo boo
contexts was renamed to sandboxes and can now be used to create completely independent sandboxes (previously tightly coupled to the angular package)

Moved cookie normalization out of angular HTTP middleware and added it to express/session middleware where it fits better, in addition to skipping the response header emission step, which could have been problematic
Refactored angular package to use new sandboxes API, and improved the promise workflow