Pass athentication keys as JSON. Better encapsulation of data requests. Use OpenAuth 2.0.