make api resources read only
task messages fixes