. . . "REST requests must contain all information, including authentication, within the URL. This can lead to security threats somewhere down the line." .