Api routes are authenticated with users api id and api token