Extending guidelines to include APIs that need authentication and authorization

[stevewilhelm]

Would you consider providing guidelines to include RESTful APIs that requires user authentication and data access authorization?

For example, how would you ensure I was Steve and when I request "/dogs" I only received my dogs?