basically done, but won't work because of xss problems
have configuration in apache working with this