https://www.arunangshudas.com/blog/rest-api-authentication-methods/