authorization

1. cookie based auth
2. frontend developer client for socket.io
3. collectable resource partially worked