temporarily disable api access, use default html and give -H for api acces (in dev)