webserver is working now (at least without hashing the sum of secret and
random number)