Explain the difference between authentication and authorization and how you would audit a complex API for these flaws at _VOIS.
