updated api auth