Fix issue #13 restrict API access