Fixed security pattern to catch all api requests