Changed authentication to user level, instead of API key level