Adding authentication to the api, via an access token