experiment to auth an api via rack