checking api route in separate method
fail unauthorized api requests
fail isAPI sooner if no API available