adding 35x35 board size restriction to 'request/create' unless a secret is given