Alternatively, how can I run server-side code when a user performs an action such as clicking a button without the user seeing the network request and without the request being exposed (because I will be sending info such as an API key to validate the request to the api)