Auth server with REST API