@creece, have I seen you mention stuff about restlets on here before? seems like you've used them quite a bit? I'm reading about authentication and since it requires an nauth http header that includes authentication data (e.g. netsuite email/password or OAuth token data), are these restlets expected to be used for integrations with other systems and not for servicing a web-browser client? Because I'd have to send that sensitive data to the browser in order for it to call the restlet?