changes encryption requirement to only cover API requests and removed unused routes