working on configing api auth