rest client - auth