I have develop a backend that serve some protected files using x-sendfile. So if I ask for a file the request goes from client to backoffice for authentication and then to apach