$output = "Only POST and GET methods are supported";
    $status = 405;
    // method not allowed
}
if ($valid) {
    // check against the ones we know and process
    $parts = explode('/', $cntlr->path);
    $pathSeg0 = count($parts) > 0 ? $parts[0] : NULL;
    $pathSeg1 = count($parts) > 1 ? $parts[1] : NULL;
    $pathSeg2 = count($parts) > 2 ? $parts[2] : null;
    try {
        if ($pathSeg0 == 'verifykey') {
            // SPECIAL case handling (no authn handling)
            $ssoKey = optional_param(iclicker_controller::SSO_KEY, NULL, PARAM_NOTAGS);
            if (iclicker_service::verifyKey($ssoKey)) {
                $cntlr->setStatus(200);
                $output = "Verified";
            } else {
                $cntlr->setStatus(501);
                $output = "Disabled";
            }
            $cntlr->setContentType("text/plain");
            $cntlr->sendResponse($output);
            return;
            /*
                    } else if ('verify_go_ws' == $pathSeg0) {
            // test the go webservices
            $clicker_id = $pathSeg1;
            $last_name = $pathSeg2;
            $output = iclicker_service::ws_go_verify_clickerid($clicker_id, $last_name);
            $cntlr->setContentType("text/plain");