Improving api experience replacing auth token with secret