I made an api that contains an array of object. But I don\'t want user can post data to it. So, I created a secret key and store it inside .env variable. Now, when I want to