If cross scripting not allowed then just return json
implement timeout of token set to 16 hours.
Added a uuid converter for url safe uuid (base 64)

Made the  example about to be bound to another machine via a baseUrl
setting in the web.xml, -D or env vars
Merge pull request #5 from IHTSDO/develop

Develop