middleware responds to /gimbal.js