update
use encrypted api authentication
update