revert ocsApiRequest to protect against CSRF attack and add in the same statement the apache authentication