Simple REST-based authentication service