removed AuthApi (will be part of Api)