Improved api access handling

moved authorization into filters preparing token auth