how to make server-side queries with supertokens validation