Add claims support to API. TODO: Protect.