Develop

fixing a number of things revealed by the server failure.
A) The web-example can be deployed on another machine and that can then be used to test (e.g. as if it were another service) - Makes sure that the "it all works on localhost" is testable
B) If crosscontext is not set the app with just emit json
C) The token has been made url safe & has a 16 hour ttl