Added additional fields to response, also disabled visual authentication...

... for api module.
this seems problematic. does this mean that anyone can access all of the data without signing in? or am i confused?