http-service: /v1/refs returns list, not dict

This way is more RESTful, and consistent with /v1/remote_controls.

Nothing was actually depending on this, yet.