file_get_contents instead of direct socket due to firewalls
reference python cgi relay for auth keys (ip only auth, pretty insecure)