             res.write JSON.stringify msg
             res.end()
 
-    if url is '/user/zenozeng'
-      json =
-        remote: config.remote
-        username: "zenozeng"
-        key: config.users.zenozeng.key
-      base64 = qrcode JSON.stringify(json)
-      response "SCAN THE QR CODE", "<img id='qr-code' src='#{base64}' alt='qr'/>"
+        else if action is 'clone'
+          json =
+            remote: config.remote
+            username: "zenozeng"
+            key: config.users.zenozeng.key
+          base64 = qrcode JSON.stringify(json)
+          response "SCAN THE QR CODE", "<img id='qr-code' src='#{base64}' alt='qr'/>"
 
   server.listen 8080, '0.0.0.0'

      res.write html
      res.end()

    url = req.url

    if url is '/'
      console.log session
      console.log loggedIn
      console.log loggedIn[session]
      if loggedIn[session]? and loggedIn[session].timestamp < ((new Date()).getTime() - 10*3600)
        response 'Login Success!', ''
      else
        json =
          session: uuid.v1()
          remote: config.remote
        json = JSON.stringify(json)
        base64 = qrcode json
        response "AUTHORIZATION IS NEEDED TO ACCESS", "<img id='qr-code' src='#{base64}' alt='qr'/>"

    # api for android
    if url is '/auth'
      console.log req.method
      if req.method is 'POST'
        body = ''
        req.on 'data', (data) -> body += data
        req.on 'end', ->
          POST = qs.parse body
          {username, hash, session} = POST
          timestamp = parseInt((new Date().getTime()) / 1000 / 30)

          key = config.users.zenozeng.key

    expires.setTime(expires.getTime() + 3600*10)
    session = cookies.get 'session-uuid', {expires: expires}
    unless session?
      session = uuid.v1()
      cookies.set 'session-uuid', session

