Secure restful servers using basic auth and later switch to https