Make JSON endpoint inaccessible to outside world