What we learned operating auth for 900 APIs | Hacker News Reader