Stumped out transfer approve.
Added exclusion of API URLs in login check.
Added file.