REST API is restricted to authenticated users.