disable direct access from web module to extApis module