OAuth or Not: When to use claim based authentication for your API | Hacker News Reader