Thanks, I have that working now.
About the adminAuth (which I don't think I need but am curious) - I see in the serial port node, which is often pointed to as an example of making/using an http endpoint, that the call to RED.httpAdmin.get has RED.auth.needsPermission('serial.read') as one of the parameters. At the reading level it's pretty clear what is intended but what's not clear is who needs the permission to read the serial port? Is it the node (which is doing the reading) or the browser/editor which is asking for the details? Also, what is serial.read - where is it set up and what would I use instead of serial.read to (dis)allow access for other types of data?
In my case, the data being passed around has been obtained by the node from a separate server which mediates access to the actual devices on the USB bus i.e. the node itself doesn't directly communicate with the devices or the USB bus.
chris