Separated client from server code, but had to deactivate security.
Separated server from client, added security via custom encrypted tokens.