1. A username and password must be used to authenticate all requests to the API.
  2. All requests use Basic authentication.
  3. All requests must be sent over HTTPS.
  4. Content-Type must be set to application/json.