Minor - adding api_not_allowed()