skip authentication for api requests
render json, update per warnings in log
add jsonp support