add a TODO.. server root shouldn't be hard coded