exposed form api data as public

Api.getForms should be public so that client apps can have a list of forms available to query