Moved auth.php to API