ignore secret token
basic dispatcher
(hideous) javascript dispatcher