tidy up ingr api spec
denies unauthorized adding of ingrs