Rewrite requests

Rewrite the request infrastructure to facilitate more interation and to
intrinsically enforce some of our policies (must sell at known store, must
provide URL if you can, etc).

This also moves requests to logged-in users only, which should help following
through on confusing requests.