Fix auth in API