login now required for api
more permissions