clarify tooltip
rename route api file
add basic api auth