Move authorization to a helper and execute it before every API call
Add a 'random' endpoint