Require username and password for api calls
Merge remote-tracking branch 'origin/master'