Remove creds restriction on api endpoint, now just localhost filtered
Merge