fix authenticity error for api