Merge pull request #10 from mdlayher/master

Move apiClient AJAX calls to RESTful IDs, always pass session via cookie