players rest service with auth