move files to /client dir (allows for easier merge of /api and /client projects)
Allow cookie exchange with braindump api in CORS scenario