nickname fixed for new swagger ui, access control added for app response