changes to add apache auth proxy in front of api