working on api authentification