As I said, this method itself doesn't mean it is part of REST. If your none-rest Web application also uses stateless token-based authentication, it is perfectly fine to use this method.