auth endpoints

Use the references for REST API 28.0 auth endpoints.