Added headers manipulation via the API and in the js client
Added login screen half-usable
Implementing cookie management to authorize the client
Included authentication in client and server, basic clear password token