the landing page passes some credentials to HTML5's Node app
moving the handler for /html5.client in its own method