Hacker News Reader

Not sure, I haven't seen a good story for it. We'll stick with REST.

I don't think APIs in general should have anything to do with authorization, other than passing along a token.