proof of HTTP api for Authentication service