log who accesses the api