api w auth on 1 dir