Basic Authentication information of the current user session (if the connection maintains the session)
or just authentication info from the last remote call (when the connection is stateless - usually
recommended for really RESTful designs).
Represents a resource which can be expandable - that is REST API is capable of sending just the number
of child resources or when the entity is expanded, also the child resources themselves
Information about current user "session" - or in case of the recommended stateless connection (really RESTful design)
just the information about the user and the user login data.