restful url design ,auth function coding