CLEAN: update license and doc.
FIX: Add “app” auth store universally.
FEATURE: Add httpAddWebSocketsRoute

For angular-mvc, always pre-create a web sockets route /stream.
FIX: Add JSON retry response if the security token does not match.
FIX: Change default server prefix to “/do”.
FIX: Don’t send XSRF token in HTTP header. Only in session cookie.