Lock 10 and API Authorization