rewrite api, seperate calls for auth and tickets, and possibility to fetch tickets