Securing the backend