Creating a secure REST service