Better authentication (only allows /rest/public/, the rest of /rest will require authentication)
User API - Just a prototype, need to see how to know if logged on etc.