Authentication

API keys, scopes and sessions.