T-012: port the single-player client onto session + loopback

T-009 + T-010: the session/transport seam — server/session.js