Made the authentication a bit more RESTful by changing..
1) POST /authenticate => POST /session
2) POST /logout => DELETE /session