Auth, login, logout, api root