I need some suggestions on how to secure REST APIs and web based internal system using a single authentication system. I am looking into the possibility of using:[*]oAuth 2.0[*]JA-SIG CAS[*]Custom Implementation (implement two separate APIs)[*]To secure REST APIs and redirect calls to specific API instance[*]To authenticate web application users.