add abstraction to api authentification control