Release 0.5.2

Fix `authenticateApiRequest`, do not throw if the request is not GET or POST