have basic auth, user, and post resources served through REST