Add authentication and sessions, clean up API calls