Create clearer updates between UI and Core about giving/getting access

ran grunt test
should i be checking to make sure the instanceId matches who you think you're proxying from? otherwise I can take it out.