https://arunangshudas.com/blog/rest-api-authentication-methods/