I will try to parse my string to this format. Do I have to force authorization on my custom rest api?