first attempt to secure backend