* enhanced mapper exception handling
* added random utility
* added validator
* controller now builds in-process session if CLI
* API can now POST
* API captures return status code & leaves exception handling to clients
* Response delays writing headers for sessions, mostly for unit test
purposes