basic REST authentication now implemented - need to fix currentUser - could be multiple users - each should have their own ticket