Made it such that an authenticated user (ie: one with an api_key) is not subject to time range limits.  We might want to revisit this and put a finer grained control on this (add in new permissions so just having an api_key isn't carte blanche, etc) but we can read that info out of the user object at a later date if we want to go that way.