protect the server in developmode