fix security access API restful using doorkeeper