WIP records: REST API addition

Perhaps we can just use the HttpError(401) instead?