Endpoint done, working on auth