API Authentication

- [x] Session Authentication
- [x] Token Authentication