turned off DOS prevention in middleware, will turn on later