split js into client and server directories
remove autopublish since it's a security mess
include client id in template to ease development
clients are removed when they disconnect