removed the server code.
changed auth scheme to session-based.