This is exactly right. Many people confuse this problem with solutions that involve storing state on the server. Doing so completely misses the whole point of

This is exactly right. Many people confuse this problem with solutions that involve storing state on the server. Doing so completely misses the whole point of RESTful authentication.