Turned api security back on