API authentication work