fix link
add Handler server, refactor session object to have Save(), SetToken()