API public/private key authentication