service: authenticating requests to services