added api root to auth check