authenticate via direct call to api