allow home data api through security