Use basic authentication and ssl. The users credentials will be encrypted and the API will be easily consumable from cli and from browsers.