Fix API auth