API now uses token-based authentication.