plain in this case (would use a framework if i needed db, and perhaps auth)