Secure REST API