#master: restful auth implemented