add 'sudo'-authentication where admins can use the rest api as a user