Fix bug with overzealous API auth settings