How can I securely authenticate users and protect private data in a PHP and Java REST API setup