congrats, you now have server-side xss