[fix] fix API calls & add more authentication checks