API Authentication vs. Authorization: Methods & Best Practices