still struggling with AJAX permissions
ACAO header now uses wildcard, local server IP address computed on the fly
direct sample access now works, see ../tmp
adding example of ../js/wav.js
switched css inclusions so we can override jquery mobile css more easily
commenting out all positioning css: not needed