requiring credentials for api requests