Whitelist API and /data/ requests for LOCKDOWN mode.
Merge pull request #2682 from jamalex/lockdown_fixes

Whitelist /api/ and /data/ requests for LOCKDOWN mode.