got api auth working, more updates to do