Rest Api Https Authorization Vs Referral