Mock api, routing + authentication