author based api auth