sinatra-ish simple waf