don't hardcode server url in javascript client