Do I have to create an API for token authentication or is there another way I can create some kind of login that would allow me to download a .csv file? I need a status cod