https://www.atatus.com/blog/authentication-and-authorization-for-restful-apis-steps-to-getting-started/