add authentication of RESTful API