Implement API authentication
Add global API access denied handler