Plus, I don't think supertokens should be publicly exposed for frontend access, there should be some kind of gateway/proxy in front of it