moved server-side scripts out of public/