Changes to API authorization