Should I use AuthHttp also in case of API server?