jarrod pwn, unnecessary res.end