called directly from the browser