almost got to rest completely - just auth service left