rename client file
implement cors session handling