refs #443 - allow to disable API authorization (and use for menus only)