More auth/authz code for /api/access/*