Authorized application layer for REST API