API debugging flag $wgDebugAPI to disable some security checks