Comment to 'API authentication'