Authentication

Explain how clients should authenticate their requests (e.g., using API tokens, OAuth, etc.).

• ...@Jase/@Steven