You can auth to a RESTlet via: * Session (would need an active NS login) * NS user credentials (you could set up your external app to use an account rather than needing customers to have credentials) * Token-Based