login/logout + getApiKeys + endpoint