Issue #176 - Added test to ensure browser cannot access resource APIs