// Party REST + realtime - same origin as everything else, auth is the // session cookie (see embyApi.js), so no headers/tokens to pass around here. // Realtime is Socket.IO (window.io, loaded via