Yes. On login issue a single session auth token to be stored in the header and passed for all future API requests.

You should consider one of the many frameworks that handle this sort of thing for you (every language has them.)

It is unclear from your comment how you might be helped.