scalar openapi authentication