Allow API use by regular users, not just admins