Work on API auth.