API auth fix