Enabled the API to use the currently logged-in users permissions against...

... api endpoints
why?