API authentication

How API auth will work as the public REST surface expands.