REST API is limited to authenticated users or valid API key