api using authenticator