fix api controllers

frontend/modules/api/controllers/ApiController.php

@@ -3,7 +3,11 @@
 namespace frontend\modules\api\controllers;
 
 use common\behaviors\GsCors;
+use yii\filters\auth\CompositeAuth;
+use yii\filters\auth\HttpBearerAuth;
+use yii\filters\ContentNegotiator;
 use yii\rest\Controller;
+use yii\web\Response;
 
 class ApiController extends Controller
 {
@@ -24,6 +28,18 @@ class ApiController extends Controller
                     ],
                 ]
             ],
+            'authenticator' => [
+                'class' => CompositeAuth::class,
+                'authMethods' => [
+                    HttpBearerAuth::class,
+                ],
+            ],
+            [
+                'class' => ContentNegotiator::className(),
+                'formats' => [
+                    'application/json' => Response::FORMAT_JSON,
+                ],
+            ],
         ];
     }