Crystal Shard http-protection