Restrict guest access in Magento API