fixed to allow json endpoint access by any http client!