Add API authentication