added api namespace, using urls, unsecured