RestApi: Client authentication