more SSL and API auth token stuff