dont auth through website api if no django session key is provided