Allow web authenticated users to access api endpoints