Authentication solution for REST?
lsc: I think http auth is pretty standard for REST stuff;  users don't see it, so nobody cares that it is 'ugly'(personally, I still don't understand why http auth isn't in use in other areas;  it brings user authentication outside of your app and into the http server, which makes it quite a bit easier to make other apps written by different people in different languages/frameworks use the same auth.)