Rename app.js -> server.js.

Most of our projects use server.js.
Enable docker/fig development environment.
Add server-side blinding.
verifyPublicInfo should return both username and purpose.