Blocked access to api/includes