json stuff
server protections hopefully...