Authentication is done in the api! hurray