templateresponse now depends on the api, jsonresponse doesnt need the appname any more, security exceptions are now logged