add in logic to expose all api methods to superuser