fix unauthenticated api requests returning http 200, they now return http 403
fix unauthenticated api requests returning http 200, they now return http 403

JunctionAt/JunctionWWW,JunctionAt/JunctionWWW,JunctionAt/JunctionWWW