document post/get requests and how clients are supposed to use it.
Also factor out the verification functions (to be implemented)