Small test RESTful app with token based security