In production api documentation now requires authentication