adding info on authenticating to the REST API