Spotify: no session
Actions: log in · log out
Car app: GET status (JSON, CORS open)
Controls: POST control?action=next|prev|pause|resume