wip: api.authentication.py