When we call murmur_lib::create or murmur_lib::prepare_execute we take the username and seed from a session cookie, we shouldn't do that, instead the endpoints should accept username and seed from the http headers.
Also add an endpoint to derive the seed.
This would make the api more secure and a degree more stateless
Adapt murmur.js accordingly
When we call murmur_lib::create or murmur_lib::prepare_execute we take the username and seed from a session cookie, we shouldn't do that, instead the endpoints should accept username and seed from the http headers.
Also add an endpoint to derive the seed.
This would make the api more secure and a degree more stateless
Adapt murmur.js accordingly