RESTful authentication is partly done