more functionality added to API server -> bypassing authentication for android to send create json request