store files in data directory (for now)

this should actually be some user-defined directory in their home
directory. need to figure out proper file permissions first