The initial implementation did not use any type of authentication,
and permitted all operations to be carried out by any
connected user or device. Whilst this is a valid approach for
an experimental server operating on a private network, this is
clearly not a model that should be adopted for any publicly
addressable, Internet connected service. Hosting the service
on a server using HTTPS, and modifying the service such
that some or all API calls require authentication via Basic
authentication [19] is very simple however, and was explored
in subsequent work.