added development server to bypass x-api-key
added session
implement session services