Which method of account authentication does OAuth 2.0 within REST APIs?