corrected API authentication