Be more careful about :only option handling in api controller.