allow multi handler for a verb
messy code with authentication