dont provide API data to unauthorised user, minor formatting