basic REST client authentication