basic SAM REST service security