invoke authenticated rest