API working. Added Token Authentication. Need to add permissions.