How to protect my web app (scripts, models)?