REST authstr