As the title, I noticed I can access reservation-service directly without any token or user credentials prompt. Why there is no security ?