move setting heartbeat so it can't be changed by the request data

[barnabwhy]

this is already on the ms (thanks bob ;) ) and it stopped the funny lots of server