API Endpoints and Authentication