SOLVED (At least the web services part of things)
The visitors permissions on our site had "use remote interfaces" totally disabled, so no web services were able to be used. Enabling that lets all users check things out.
Thanks for the help Marc, it pushed me in the right direction to figure out the problem.