Make door access a post instead of a get
Door codes are displayed in webserver logs.... So the solution is to make the endpoint a post request, which I guess when you think about it makes more sense than a get request.
To upload designs, you'll need to enable LFS. More information