noauth bugfix: api response object is sometimes not json