new API Endpoints and Auth