Making sure methods are only called server-side