auth system & synchronization with API