api authenticatio commented