First pass at authenticating API calls.