API auth
credentials from django DB