removed spa directory
added spa login support
added logout functionality
added CORS support