Hass said about 1 year ago on Updated API tutorial :
This would be great with some JWT tokens and other alternative ways of maintaining session on an API.