Hi,
The server was experimental. I recommend building your own object store, say on top of a nosql db w/ memcached (it shouldn't be too bad using node.js and common libraries). Each persistent object had an associated access control list. We weren't using the lists for ordering concurrent access but 1) preventing data confidentiality and integrity violations while 2) providing an easy reactive API for sharing and persistence.
Revisiting this issue, say by incorporating something like membranes (or our recent work with 'object views') for better sharing and focusing on the distributed DB nature of phones+nature would make writing phone apps much more palatable. I was recently in a position where I saw 5-6 teams roll their own secure distributed objects for Android/iOS/web views and it was a disaster.