Some kind of authentication would be great to be able to control who has access to your backend. Maybe just some basic http auth would be enough.