- added ApiRoute annotation to denote a route as an api method. This is required so the authenticate will be done via an Authorization header, which is more api friendly, rather than cookies.