auth.api and data.api json problems
data.api check permissions when auth not working