complete securing the api calls so we can have an unreadable discussion