because now everybody can send requests to my server, but prisma server is protected with secret