api authorization check enabled