progress on REST API authentication