Add authentication to API