turns out every api call was directly forwarded to the wallet over
normal http.

added a block to stop none mining type requests from hitting the wallet