Allow a currently logged in user to interact with api without key