Can now be authorized via api key
Now an idea of a application system user, that acts on behalf of an application