Why Do We Have Authorization And Not Authentication In Api Requests