allow read/write from server, so you can write REST functions