To give you some context, the Foreman API controller handles authentication and authorization for each request for us via - (https://github.com/theforeman/foreman/blob/develop/app/controllers/api/base_controller.rb#L108). However, with our separate authorization systems, we need that to call ours.