The initial implementation did not use any type of authentication,
and permitted all operations to be carried out by any connected user or device.
Whilst this is a valid approach for an experimental server operating on a private network,
this is clearly not a model that should be adopted for any publicly addressable,
Internet connected service. Hosting the serviceon a server using HTTPS,
and modifying the service such that some or all API calls require authentication via Basic authentication is very simple however,
and was exploredin subsequent work.