Howard/api auth

Use 2 (not 4) spaces for indentation.