Demandware - Allowing API Access