Using iron-router params.query syntax in router.coffee
added an alphanumeric userSecret with length 10 symbols
using the userSecret to control the permissions for raise/lower hand