Currently the API is just validating with a appservice key. Would it be a good idea to add azure ad authentication/authorization for these apis. The UI could then send the token so as to use the Fast API.