Only authenticated users can access the JSON API (#1)