Protect combined API+web servers for version 1.1 of API