You have multiple options. If you use SSL, then it might be easiest to just use http authentication, transmitting the users credentials for each request, which

You have multiple options. If you use SSL, then it might be easiest to just use http authentication, transmitting the users credentials for each request, which is also the only official restful solution (each request should be independent of each other request). If you don't want to do that, create an endpoint that takes username and password and returns a token which must then be present in each request (maybe even as part of the authorization header). Or use OAuth.