fixes #1764, removes login prereq for api suage