API Authentication Middleware based on Signed-Certificates (SHA-256) and Token based sessions.