API Slight change to auth logic

Change the authentication logic to only check security ID for authentication
iff the user is already logged in.