Implementing an authentication system in REST APIs?

You can add in an APIKEY function that user can then set within their user profile - this can then be ran as "if API_KEY is blank then exit - else login and continue session"