all calls are now relocated to `/api/*`
authorization is now working for all calls
unsecure resources are now accessable over POST
authInterceptor added so the client will send the headers accordingly
refactored to use ipCookie for cookies with expiration
Merge branch 'authorization'

* authorization:
  refactored to use ipCookie for cookies with expiration
  authInterceptor added so the client will send the headers accordingly
  unsecure resources are now accessable over POST
  authorization is now working for all calls
  all calls are now relocated to `/api/*`