The authentication REST controller