Enabled the API to use the currently logged-in users permissions against...

... api endpoints
This was disabled ages ago, I just thought it was worth finally mentioning the reason...