Since this is a REST api server, we don't need sessions, we will be protecting
the site with CORS.