secure API authorization Shawn M Moore C<< <sartak@bestpractical.com> >>