Replace async right with a client id system

The id and to generate a different "client id" for each asynchronous rendering and send that client id in the ajax request to make sure it's allowed to access it. It's much easier to implement than right which is sometime hard if not impossible to properly choose in depending on the async use case and it allows using the client id to optimize asynchronous buffer to remove an entry when all registered clients already asked for it.