API has plugable authentication methods, reflect this.

Refs #578