check for api requests vs. browser requests
test authenticatable api protects api type requests
Merge pull request #63 from G5/auth_fix

Auth fix