The API is deactivated. The API does not properly enforce permissions yet. For example every user can request every project / task etc.
To activate the API remove the die() statement in api.php line 38.
DO NOT USE THE API ON PRODUCTION SERVERS !