put & get scripts working, TODO: auth