Comment to API authentication