full URLs with a clean API, and isolate the cruddy party where we have to hardcode the server protocol into a single file.