0.0.9.6

optimize session control…embed the token into server and put it into
form once user visit the `/pool` page~