moved methods to the server

One of the main security features kids that methods can run on the server but be called by the client... as such I think we should recommend keeping this file in the server folder.