rewriting ServerConnection to use HttpWebRequest instead of HttpClient,
which allows to get/set the "authentication" session id

i've also written a certificate handler which should allow us to access
certain whitelisted domains