Very basic auth mechanism to white list API calls from other servers this is ONLY in place to limit access to an API based on white list there is no other authentication hook behind this fro granular control