Basic http protection for non-production ready apps