I think adding it later is a good idea, as having authentication right now may hinder progress in the functional aspects of the API. We could have an authentication sprint after the API is fully built - what do you think?