How does the seller authenticate through API?