gitignore
now use socket.io authorization backed using session key in cookie, refactor how user connections are stored