rest authorization implementation continues