Andy Balaam explains how we can use OpenID to do user authentication in our REST API. Slides, code and more details: http://www.artificialworlds.net/blog/2014/06/23/openid-security-in-a-rest-api/