api not secure

I recently made a server and when i fetch devices it simply send me everything without need for any session or login,:

http://XXXXXX.com/api/devices

on demo servers it asks for login but not on my server do i need to enable some settins to make it secure?

Thanks

On your server you're probably already logged in. That's why it doesn't ask anything. Try logging out.

Thanks it was the case sorry for late reply.