Added capability of locking down REST API to users with access to their API key, either via logging into the website or using the REST interface with their user id and associated API key