Add API controllers to all non-authenticated requests to access the json