#next.js route handler security