client and server, raw express no model or verification