Document how Server side security