Authentication and need for at least a pseudo "session state" always seems like the trickiest part of building a 100% RESTful app. Anyone have details/examples on ways to address these?
Login:
PUT https://example.com/credentials
{"username":"foo", "password":"bar"}
HEAD http://example.com/credentials
Cookie: ...
GET http://example.com/credentials
Cookie: ...
DELETE http://example.com/credentials
Cookie: ...