removed cors policy and using now framework cors feature
session generation task needs know a collection id
added the ability to set points via map controller and a session key