Make sure that api requires authentication by default!

needs to be merged in 2-0-stable and 2-1-stable as well!