Security and HATEOAS