work-in-progress on client servlet and authorization+token servlets
while sitting on croatian beach