Temporarily weakening API security (fix was already written in dev-api)