API auth, and first endpoint w/ caching.