authn for api --KW