Fix some JSON responses + access control