Stupid me. Forgot creating the Collection when overloading the constructor.
Anyway, now GET /api/name requires login, but GET /api/items/me works without logging in : /.
GET /api/name
GET /api/items/me
Any way it's possible to also require login for the collections?