Fix api security

woo!