proper authentication for api