comment rest works with new auth mechanism