Add code to Secured.java to allow access for JSON API calls (if the headers include the username and password).