api authentication working
refine api