make json file uncallable via http