Question: can one application request resources from another application by using the URL containing other app_id than its own? If not, where we prevent this?