Tools API: use history manager to get history in create() to allow anon users to get their only history; Update browser/casper tests to use api upload for testing, remove use of upload tool form